An administrator sends an invitation and approves this browser.
After that, this browser stays signed in. A new browser needs a new invitation.
This browser needs an invitation from an administrator. After they approve it, this browser stays signed in. There is no publisher password.